Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File: uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier: pKf038rc9WpA4QaAbJGOYvs9DUOmhUhescVagAuUBFY=
Subject key identifier: EC:11:66:D3:02:35:18:22:2E:81:CB:66:5C:BD:CD:DC:A7:60:0F:30
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 019656EF089510AEA82541050FFF053FA02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number: 058D
Signing time: Mon 21 Apr 2025 06:00:27 +0000
Manifest this update: Mon 21 Apr 2025 06:00:27 +0000
Manifest next update: Tue 22 Apr 2025 06:00:27 +0000
Files and hashes: 1: 2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa (hash: +pS/y3RWSR6TxKFf5ZhZuo/zIgUD0Lt0+Wg4CPqr+Zg=)
2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: G2npsWww0R6IOVLDKc/lQjVoOiTcfsKD/RSCWflIRys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:08:95:10:ae:a8:25:41:05:0f:ff:05:3f:a0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Apr 21 06:00:27 2025 GMT
Not After : Apr 22 06:00:27 2025 GMT
Subject: CN=ec1166d3023518222e81cb665cbdcddca7600f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:21:0a:34:8f:85:3f:b0:cb:b3:02:19:eb:
75:14:53:4f:71:d9:6e:61:c1:de:d0:43:4d:5e:f9:
12:77:44:ee:f4:54:e0:8c:18:70:e0:e3:81:be:67:
63:3b:39:d3:a6:21:c6:a0:8d:c4:31:86:99:4c:b5:
56:1f:35:bb:58:c0:d1:6a:fa:7d:a8:87:bd:3f:b7:
46:81:02:6a:b8:04:8c:ad:cb:7b:f6:b2:c5:38:49:
a2:60:b1:17:fc:07:1f:97:33:0d:ad:16:0a:76:0e:
a0:40:dd:4c:3b:26:b9:94:3b:b1:7b:38:23:d0:ce:
97:9a:e1:b5:15:70:a9:e8:ea:84:0a:37:9e:55:18:
58:12:11:b6:97:73:14:d3:c0:56:0b:1d:40:d4:f1:
e8:37:d9:ec:cf:78:6a:1b:34:b2:a6:c6:5d:3b:d7:
7e:0f:47:1e:81:77:0d:0a:c3:20:b2:e9:e6:a4:5e:
40:75:43:47:65:5e:1f:94:0e:d2:1a:2f:21:ed:2e:
46:33:6a:fd:93:f9:86:b5:a7:9b:9d:dc:83:be:62:
81:28:43:66:be:4a:10:af:77:b4:24:fc:37:f9:42:
dc:d6:c6:08:ca:87:00:81:22:2c:fc:c5:4b:95:7f:
71:3b:d3:ad:8e:29:8a:d1:65:ff:b4:81:75:b4:79:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:66:D3:02:35:18:22:2E:81:CB:66:5C:BD:CD:DC:A7:60:0F:30
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:13:ba:9a:94:ee:f6:60:f6:ea:92:70:be:2b:ad:86:8f:ee:
41:5e:78:1f:16:f5:e9:85:ef:70:3e:dc:76:b4:c6:21:7a:31:
e1:7d:5c:2f:f3:17:4f:a6:2a:ab:f1:b3:38:8f:2b:5f:d3:db:
b2:34:5a:38:26:ce:1e:f2:16:41:de:a4:18:8e:42:e2:27:bf:
36:b0:38:25:16:47:ed:1d:82:6b:55:b0:8c:dc:94:a7:80:39:
6f:7e:48:52:ac:19:aa:4e:a8:75:04:62:57:0b:69:a7:22:5e:
83:a7:0b:d4:36:c6:61:97:c4:d7:a6:ab:dc:fd:7c:d6:41:31:
b2:50:4b:e0:70:48:06:c3:f0:cc:d3:6a:d5:64:f4:ef:7b:f1:
9b:76:bc:ab:05:54:ee:c4:30:be:a5:ca:bf:5c:55:4c:b1:74:
89:71:a7:f2:e3:b0:94:5d:af:3c:b3:da:4e:be:ee:5e:7b:73:
9c:40:bb:46:bf:67:5e:e6:20:c6:2a:1a:27:90:b1:16:8d:c0:
f9:41:a6:38:40:a9:84:90:ac:8e:36:04:18:d9:81:31:d0:55:
fa:d2:66:f9:58:97:23:2f:a4:55:e5:30:9d:7b:98:76:20:95:
c3:21:78:ca:75:0a:4a:43:1e:10:cc:e6:2c:16:21:43:e5:81:
cd:2e:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:45 2025 by rpki-client